The Google Cloud Security Community will be in read-only mode July 16 - July 22 as we migrate platforms. Read more and check out our FAQ.

[vanitharaj1208]

is it possible to run retrohunt from playbook ?

[RanjithHegdeK · Accepted solution]

Hello @vanitharaj1208 

Yes its possible to execute Retro hunt from the playbook using Action "Execute Retrohunt" from GoogleChronicle. Rule ID, Start time and End time is required.

Reference: Google SecOps  |  Google Security Operations  |  Google Cloud

Thanks

[vanitharaj1208]

I have a rule that previously generated detections, but now when I attempt to run a retro hunt, it is not generating any alerts.